Add note about Tanzu kubeletDir (#575)

* Add note about Tanzu kubeletDir

Fixes #574

* Update ring to satisfy cargo deny

* Ignore RUSTSEC-2025-0012 for now

Author: nightkr

Cargo.lock

@@ -29,6 +29,15 @@ ignore = [
     #
     # TODO: Remove after https://github.com/kube-rs/kube/pull/1652 is merged
     "RUSTSEC-2024-0384",
+
+    # https://rustsec.org/advisories/RUSTSEC-2025-0012
+    # "backoff" is unmainted.
+    #
+    # Upstream (kube) has switched to backon in 0.99.0, and an upgrade is scheduled on our end. In the meantime,
+    # this is a very low-severity problem.
+    #
+    # TODO: Remove after upgrading to kube 0.99.
+    "RUSTSEC-2025-0012",
 ]
 
 [bans]

Cargo.nix

@@ -55,3 +55,8 @@ In some cases IBM cloud has the kubelet directory located at `/var/data/kubelet/
 `failed to publish volume error=status: Unavailable, message: "failed to create secret parent dir /var/data/kubelet/pods/<POD_ID>/volumes/kubernetes.io~csi/pvc-<PVC_ID>/mount: No such file or directory (os error 2)"`
 
 In case you are encountering the mentioned error (or secret-operator does not work on your IBM cloud at all), you need to add the argument `--set kubeletDir=/var/data/kubelet` to the `helm install` command.
+
+=== VMware Tanzu
+
+VMware Tanzu uses a non-standard Kubelet state directory. Installing secret-operator on Tanzu requires the argument
+`--set kubeletDir=/var/vcap/data/kubelet` to be added to the `helm install` command.